McAfee Management for Optimized Virtual Environments AntiVirus 4.5.0

Transcription

1 Migration Guide McAfee Management for Optimized Virtual Environments AntiVirus For use with McAfee epolicy Orchestrator

2 COPYRIGHT 2016 Intel Corporation TRADEMARK ATTRIBUTIONS Intel and the Intel logo are registered trademarks of the Intel Corporation in the US and/or other countries. McAfee and the McAfee logo, McAfee Active Protection, McAfee DeepSAFE, epolicy Orchestrator, McAfee epo, McAfee EMM, McAfee Evader, Foundscore, Foundstone, Global Threat Intelligence, McAfee LiveSafe, Policy Lab, McAfee QuickClean, Safe Eyes, McAfee SECURE, McAfee Shredder, SiteAdvisor, McAfee Stinger, McAfee TechMaster, McAfee Total Protection, TrustedSource, VirusScan are registered trademarks or trademarks of McAfee, Inc. or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others. LICENSE INFORMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. 2 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

3 Contents Preface 5 About this guide Audience Conventions Find product documentation Migration overview 7 Which settings can I migrate? What happens to policies during migration? Overview of the migration process Overview of the deployment process Choosing a migration path Preparing to migrate Install the Migration Assistant Permissions to run the Migration Assistant Migrating settings automatically 13 Automatic migration overview Migrate settings automatically Verify automatically migrated objects How repeated automatic migrations are handled Migrating settings manually 17 Manual migration overview Migrate policies manually Migrate client tasks manually Verify manually migrated objects How repeated manual migrations are handled Data migration (Agentless only) 21 Which data can I migrate? Migrate McAfee MOVE AntiVirus (Agentless) deployment data Product settings after migration 23 McAfee default policy and product default settings Policy names and notes Policy merging and multiple-instance policies Migrating legacy policies to MOVE AntiVirus Common Migrating legacy policies to MOVE AntiVirus Changes to migrated settings Changes to McAfee MOVE AntiVirus (Multi-Platform) Changes to McAfee MOVE AntiVirus (Agentless) Upgrade McAfee MOVE AntiVirus (Multi-Platform) to McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 3

4 Contents 6 Troubleshooting 45 Error messages Frequently asked questions Index 47 4 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

5 Preface This guide provides the information you need to work with your McAfee product. Contents About this guide Find product documentation About this guide This information describes the guide's target audience, the typographical conventions and icons used in this guide, and how the guide is organized. Audience McAfee documentation is carefully researched and written for the target audience. The information in this guide is intended primarily for: Administrators People who implement and enforce the company's security program. Conventions This guide uses these typographical conventions and icons. Italic Bold Monospace Narrow Bold Title of a book, chapter, or topic; a new term; emphasis Text that is emphasized Commands and other text that the user types; a code sample; a displayed message Words from the product interface like options, menus, buttons, and dialog boxes Hypertext blue A link to a topic or to an external website Note: Extra information to emphasize a point, remind the reader of something, or provide an alternative method Tip: Best practice information Caution: Important advice to protect your computer system, software installation, network, business, or data Warning: Critical advice to prevent bodily harm when using a hardware product McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 5

6 Preface Find product documentation Find product documentation On the ServicePortal, you can find information about a released product, including product documentation, technical articles, and more. Task 1 Go to the ServicePortal at and click the Knowledge Center tab. 2 In the Knowledge Base pane under Content Source, click Product Documentation. 3 Select a product and version, then click Search to display a list of documents. 6 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

7 1 Migration 1 overview When you upgrade to the current version of McAfee Management for Optimized Virtual Environments AntiVirus (McAfee MOVE AntiVirus), you can also migrate your custom settings and assignments. The McAfee MOVE AntiVirus Migration Assistant walks you through the migration process. You can let the Migration Assistant migrate all your settings and assignments automatically, based on your current settings and new product defaults, or you can select and configure them manually. The Migration Assistant migrates settings in environments managed with McAfee epolicy Orchestrator (McAfee epo ) version or later. Contents Which settings can I migrate? What happens to policies during migration? Overview of the migration process Overview of the deployment process Choosing a migration path Preparing to migrate Install the Migration Assistant Permissions to run the Migration Assistant Which settings can I migrate? The McAfee MOVE AntiVirus Migration Assistant enables you to migrate settings for the most recent versions (3.5.1 and 3.6.1) of McAfee MOVE AntiVirus legacy products. Automatic migration Migrates all your legacy policies and client tasks that are assigned to the client systems. Manual migration Lets you select objects to migrate. You can customize the objects during the migration process, if needed. You can migrate policies and client tasks for these legacy products: McAfee MOVE AntiVirus (Multi-Platform) McAfee MOVE AntiVirus (Agentless) You can also migrate the legacy product deployment data (Agentless only) automatically. If unsupported product versions are installed on the systems where you want to install McAfee MOVE AntiVirus 4.5.0, upgrade them to supported versions before proceeding with installation. See McAfee MOVE AntiVirus Installation Guide for instructions. McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 7

8 1 Migration overview What happens to policies during migration? What happens to policies during migration? This version of McAfee MOVE AntiVirus optimizes and consolidates legacy products into an integrated, efficient new platform. In addition to new and enhanced features that leverage the latest developments in security technology, a new McAfee MOVE AntiVirus Common extension centralizes the shared protection features so that they are easily accessible by all product modules. As a result, some of the policy settings have changed. The Migration Assistant ensures that the settings in your legacy policies are moved to the correct policies in McAfee MOVE AntiVirus Sometimes, they are merged with other McAfee MOVE AntiVirus settings, and in others, new default settings are applied to support updated technologies. New and revised categories reflect new and shared features. New settings represent new functionality. Some settings are removed, moved to a different category or policy, or merged with settings for other features. Settings shared by multiple product components and features are moved to the Options policy under the MOVE AntiVirus Common in McAfee epo. Sometimes, settings are duplicated in multiple policies for functionality that is split across modules. (Automatic migration only) If you enabled Policy per Virtual Machine (PPVM) in or 3.6.1, note that all PPVM assignments and policies are merged. Overview of the migration process Use the McAfee MOVE AntiVirus Migration Assistant to migrate product settings where a legacy version of one or more product modules is installed. 1 Check that the legacy products that you want to migrate settings for are supported. 2 Install the Migration Assistant extension on the McAfee epo server. 3 On the Migration Assistant, select a type of migration, then follow the instructions on the screen. Automatic migration Migrates all your legacy policies and client tasks. Retains assignments. Manual migration Select and optionally configure and migrate each policy and client task. Does not retain assignments. Migrate Agentless Deployment Configuration Details Migrates the legacy product deployment data (Agentless only). 4 Verify that your settings were migrated successfully. 8 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

9 Migration overview Overview of the deployment process 1 Overview of the deployment process Migration is only one task in the process of installing and deploying McAfee MOVE AntiVirus. This deployment overview shows where migration fits into the overall process. See the Installation Guides for McAfee MOVE AntiVirus and McAfee epolicy Orchestrator for more information about installing the product components and creating assignments. 1 Check that the environment and managed systems where you want to install McAfee MOVE AntiVirus meet the requirements described in the McAfee MOVE AntiVirus Installation Guide. 2 Check in and install the product package, extension files, and the McAfee Agent package files to the McAfee epo. 3 Create a client task to deploy the correct version of the McAfee Agent to managed systems. 4 Migrate legacy product settings. 5 (Manual migration only) Assign the migrated policies and client tasks to managed groups and systems. 6 Deploy McAfee MOVE AntiVirus to managed systems. Choosing a migration path Decide which migration path to follow by considering the characteristics of your existing policies, configurations, managed systems, or any other migration goals. 1 Decide whether you need to migrate at all. Do you want to retain any current settings and assignments for your legacy products? No Install McAfee MOVE AntiVirus without migrating. See the McAfee MOVE AntiVirus Installation Guide for instructions. Yes Use the Migration Assistant to migrate your settings before deploying McAfee MOVE AntiVirus to systems. 2 To migrate your settings, decide whether to migrate automatically or manually by these requirements: McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 9

10 1 Migration overview Preparing to migrate Table 1-1 Choosing a migration path Automatic migration Manual migration Pros Requires minimal input from you. Migrates all settings for each supported product. All your policies and client tasks are migrated at the same time. Retains policy and client task assignments. For the customers who use large number of custom policies. Lets you select each policy and client task to migrate. Lets you edit the settings for each policy or client task to migrate. For the customers who use default policy settings or a minimum number of custom policies. For the customers who want to fine-tune existing policy settings during the migration process. For the customers who want to personally supervise and approve each step of the migration process. Cons You can't select specific policies or client tasks to migrate. You can't edit policies or client tasks. Does not migrate unassigned policies. Requires more input from you. Does not retain assignments. You need to assign policies and client tasks to managed systems. Preparing to migrate To streamline the migration process and minimize conflicts or duplication in migrated settings, perform these tasks before you migrate. 1 Install the McAfee MOVE AntiVirus Migration Assistant The Migration Assistant is a self-contained McAfee epo extension that you need to install on the McAfee epo server. 2 Review and revise objects you plan to migrate Review legacy settings and assignments. Consolidate them where possible. Remove duplicates and unused objects. 3 Notify the users not to make changes to the Policy Catalog and Client Task Catalog during migration If objects change while you're migrating them, the migrated objects don't reflect those changes. 4 Locate unassigned policies and client tasks for migration (Automatic migration only) During automatic migration, only policies and client tasks that are assigned to at least one group or managed system are migrated. Use manual migration to migrate unassigned policies or client tasks. 10 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

11 Migration overview Install the Migration Assistant 1 Install the Migration Assistant The Migration Assistant extension is required only for migrating legacy settings to McAfee MOVE AntiVirus You must install it on your McAfee epo server as a separate extension. Before you begin Download the Migration Assistant extension from the Software Manager or the McAfee download site ( Make sure that the extension file is in an accessible location on the network. Task For details about product features, usage, and best practices, click? or Help. 1 Log on to McAfee epo as an administrator. 2 Select Menu Software Extensions Install Extension. 3 Browse to and select the extension file, then click OK. 4 Review the extension details and click OK. When installation is complete, the Migration Assistant is listed on the Extensions screen. Permissions to run the Migration Assistant If you are an administrator for McAfee epo, you can perform the migration using the Migration Assistant. If you are not an administrator, you must have these permissions to perform the migration using the Migration Assistant. You can verify the current permissions by navigating to Menu User Management Permission Sets. Configuration MOVE AntiVirus Common MOVE AntiVirus Deployment MOVE AntiVirus General MOVE AntiVirus Policy Permission MOVE AV [Agentless] Policy Permission MOVE AV [Agentless] SVM Deployment MOVE AV [Multi-Platform] Client Policy Permission MOVE AV [Multi-Platform] General MOVE AV [Multi-Platform] Offload Scan Server Policy Permission MOVE AV [Multi-Platform] SVA Manager Policy Permission MOVE Migration Assistant Permission description View and change policy and task settings View and change policy and task settings Run System Tag Info Command View, Edit MOVE AV AntiVirus Policies View policy and task settings View/Edit Configuration View policy and task settings Run System Tag Info Command View policy and task settings View policy and task settings Run Migration Assistant to migrate policies and client tasks McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 11

12 1 Migration overview Permissions to run the Migration Assistant Configuration Policy Assignment Rule Server tasks Permission description View and Edit Rules Create, edit, view, run, and end Scheduler tasks; view Scheduler tasks results in the Server Task Log 12 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

13 2 Migrating settings automatically Use automatic migration to migrate all policies and client tasks for your legacy products. The McAfee MOVE AntiVirus Migration Assistant creates and assigns the new McAfee MOVE AntiVirus policies and client tasks automatically, based on your current product settings. This migration path requires minimal input from you. Contents Automatic migration overview Migrate settings automatically Verify automatically migrated objects How repeated automatic migrations are handled Automatic migration overview Here's an overview of the automatic migration process. 1 Run the Migration Assistant and select Automatic migration. 2 Preview and save the proposed policies. A server task runs and completes the migration. Automatic migration retains assignments for migrated policies and client tasks. After automatic migration completes, you can upgrade McAfee MOVE AntiVirus to managed systems. See the McAfee MOVE AntiVirus Installation Guide for more information. For these objects... Policies Client Tasks The Migration Assistant... Creates the new policies based on the legacy settings and assigns them to the same managed systems. You can preview the new policies before they are created. Creates the new tasks based on the legacy settings and assigns them to the same managed systems. McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 13

14 2 Migrating settings automatically Migrate settings automatically Migrate settings automatically Automatically migrate all your currently assigned policies and client tasks with minimal interaction. Before you begin Verify that the products to migrate are supported. Install the Migration Assistant extension on the McAfee epo server. We recommend that you do not change the legacy settings during migration because the changes do not reflect in migrated policies and client tasks. Task For details about product features, usage, and best practices, click? or Help. 1 Log on to McAfee epo as an administrator. 2 Select Menu Policy MOVE Migration Assistant. 3 From Mode under Policies and Client Tasks Migration, select Automatic migration, then click Next to generate a preview of the new McAfee MOVE AntiVirus policies. 4 Review the new policies. a Under New Categories in the left pane, select a category, then preview the new policies for that category in the right pane. b (Optional) For every new policy that is created under new policy categories, click Rename and Edit Notes to rename the policy or edit the policy notes, if needed. 5 Click Save to run a server task to complete the migration. Client tasks are also migrated. The Migration Assistant runs a server task to migrate your settings in the background. You can check its status in the Server Task Log. You must wait for the server task to complete before starting another migration session. After the automatic migration is complete, make sure that you configure the McAfee epo credentials under Menu Automation MOVE AntiVirus Deployment Configuration General General Configuration. Verify automatically migrated objects Check that objects were migrated successfully before deploying McAfee MOVE AntiVirus to managed systems. Before you begin You used the Migration Assistant to automatically migrate legacy policies and client tasks to McAfee MOVE AntiVirus. 14 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

15 Migrating settings automatically How repeated automatic migrations are handled 2 Task For details about product features, usage, and best practices, click? or Help. 1 Verify migrated policies. a In McAfee epo, select Menu Policy Policy Catalog. b Select each product module, then check that the migrated policies appear under the policy category. 2 Verify migrated policy assignments. a In McAfee epo, select Menu Systems System Tree. b c Select each product module where you migrated policies, then select the category for each policy you migrated, and verify that the migrated policies appear under Assigned Policies. Verify that the new McAfee MOVE AntiVirus policies are assigned to group of systems to which the source policies were assigned. 3 Verify migrated client tasks. a In McAfee epo, select Menu Policy Client Task Catalog. b Select each product module where you migrated client tasks, then select the category for each client task you migrated, and verify that the migrated client tasks appear under Client Task Types. 4 Verify migrated client task assignments. a In McAfee epo, select Menu Systems System Tree. b c Review the client task assignments for the groups and systems where the source client tasks were assigned. Verify that the migrated client tasks have the same schedule and settings as the source client tasks. How repeated automatic migrations are handled Running automatic migration after you have already migrated some or all your settings affects the objects created during the previous migration session. When you run automatic migration after migrating previously, the Migration Assistant: Deletes objects created during a previous automatic migration session. For example, when you run automatic migration more than once, only the new policies created in the most recent migration session are listed in the Policy Catalog. Assigns the new policies to managed systems. For example, if you have assigned policies that you migrated manually to managed systems, the new policies are assigned instead. McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 15

16 2 Migrating settings automatically How repeated automatic migrations are handled 16 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

17 3 Migrating settings manually If you are using minimum number of custom policies and want to fine-tune existing policy settings during the migration process then use manual migration. Contents Manual migration overview Migrate policies manually Migrate client tasks manually Verify manually migrated objects How repeated manual migrations are handled Manual migration overview Here's an overview of the process to manually migrate policies and client tasks. Use the Migration Assistant to migrate policies and client tasks. 1 Run the Migration Assistant and select Manual migration. 2 Select policies or client tasks as the type of object to migrate, then select the specific policies or client tasks to migrate. You can edit the settings as needed. 3 Save your policies or client tasks to begin the migration, which takes place in the background. After manual migration, you must assign the migrated policies and client tasks to managed systems. Migrate policies manually Use manual migration to select each policy to migrate, then edit them if needed. Once the new policies are created, you must assign them to managed systems. Before you begin Verify that the products to migrate are supported. Install the Migration Assistant extension on the McAfee epo server. We recommend that you do not change the legacy settings during migration because the changes do not reflect in migrated policies. McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 17

18 3 Migrating settings manually Migrate policies manually Task For details about product features, usage, and best practices, click? or Help. 1 In McAfee epo, select Menu Policy MOVE Migration Assistant. a For Mode, select Manual migration. b For Objects to Migrate, select Policies, then click Next. Only the objects that you have permission to view are listed. 2 Under Available Policies in the left pane, select policy categories for one or more products. The legacy policies in those categories are listed on the right side of the screen. 3 Select the name of the policy to migrate from the drop-down list next to the category name. 4 If settings in a selected policy are merging with policies from other categories, the Migration Assistant displays the other categories. For each of these categories: a Select the name of the policy to migrate settings from. b c For any category that you don't want to migrate settings, select None. Click Next. The Migration Assistant displays the source policies on the left side of the screen. At the top of the screen are tabs for each McAfee MOVE AntiVirus policy to be created. Each tab gives a preview of the new policies created when the selected source policies are migrated. 5 Click Next to start the migration. 6 On the open tab, type a name for the policy, type notes to describe it, configure its options, then click Next. Repeat to configure all selected policies, then click Next. 7 Review the summary of changes, then click Save to create the new policies that are added to the Policy Catalog. 8 On the Migration Assistant dialog box, select whether to migrate more objects. If you select: Yes The Migration Assistant displays the screen where you can select additional objects to migrate. No The Migration Assistant displays the first screen with default settings. 9 Configure the McAfee epo credentials under Menu Automation MOVE AntiVirus Deployment Configuration General General Configuration. 10 Run a server task for MoveAV OSS: Generate Certificates query to generate the certificate using the Server Task Builder under Menu Automation Sever Task in the McAfee epo server. 18 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

19 Migrating settings manually Migrate client tasks manually 3 Migrate client tasks manually Use manual migration to select each client task to migrate, then edit them if needed. Once the new client tasks are created, assign them to managed systems. Before you begin Verify that the products to migrate are supported. Install the Migration Assistant extension on the McAfee epo server. We recommend that you do not change the legacy settings during migration because the changes do not reflect in migrated client tasks. Task For details about product features, usage, and best practices, click? or Help. 1 In McAfee epo, select Menu Policy MOVE Migration Assistant. a For Mode, select Manual migration. b For Objects to Migrate, select Client Tasks, then click Next. Only the objects that you have permission to view are listed. 2 Under Available Tasks in the left pane, select the task types to migrate. The legacy tasks of that type are listed on the right side of the screen. 3 From the drop-down list appears next to the task type name, select the name of the task to migrate. 4 (Optional) To migrate another task of the same type, click + and select the task from the new drop-down list, then repeat for all tasks to migrate. 5 Click Next to start the manual migration wizard. At the top of the screen, you see tabs for each McAfee MOVE AntiVirus client task to be created. Each tab gives a preview of the new tasks when the selected source tasks are migrated. The left pane shows the selected source task. 6 (Optional) For each new task to create, type a name and edit settings, if needed. 7 Click Next. 8 Review the summary of changes, then click Save to create the new client tasks that are added to the Client Task Catalog. 9 On the Migration Assistant dialog box, select whether to migrate more client tasks. If you select: Yes The Migration Assistant displays the screen where you can select additional objects to migrate. No The Migration Assistant displays the first screen with default settings. McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 19

20 3 Migrating settings manually Verify manually migrated objects Verify manually migrated objects Check that your objects were migrated successfully before upgrading McAfee MOVE AntiVirus on managed systems. Before you begin You used the Migration Assistant to manually migrate legacy policies or client tasks to McAfee MOVE AntiVirus. Task For details about product features, usage, and best practices, click? or Help. 1 Verify migrated policies. a In McAfee epo, select Menu Policy Policy Catalog. b Select each product module, then check that the migrated policies appear under the policy category. 2 Verify migrated client tasks. a In McAfee epo, select Menu Policy Client Task Catalog. b Select each product module where you migrated client tasks, then select the category for each client task you migrated, and verify that the migrated client tasks appear under Client Task Types. How repeated manual migrations are handled Manual migration has no effect on objects migrated during a previous migration session. For example, if you migrate some policies for a product module, then migrate the same policies again: The new policies are created in the Policy Catalog. If the target policy name exists, the Migration Assistant appends a digit to the newer policy name (for example, My Policy(Upgraded), My Policy(Upgraded)-1, My Policy(Upgraded)-2). The previously migrated policies still appear in the Policy Catalog. Manual migration does not retain assignments for migrated objects. You must assign the migrated objects manually. You must manually delete the objects created during the previous migration session that you no longer want. But, if you have assigned objects that you created during a previous manual migration session, these assignments are not affected if you migrate the same objects again. 20 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

21 4 Data migration (Agentless only) Use data migration to migrate the McAfee MOVE AntiVirus (Agentless) deployment data. The McAfee MOVE AntiVirus Migration Assistant migrates the legacy product deployment data to McAfee MOVE AntiVirus automatically. Contents Which data can I migrate? Migrate McAfee MOVE AntiVirus (Agentless) deployment data Which data can I migrate? The McAfee MOVE AntiVirus Migration Assistant enables you to migrate deployment data for and versions of McAfee MOVE AntiVirus. These Agentless deployment data from the McAfee MOVE AntiVirus product are migrated: For these objects... General Configuration IP Pool The Migration Assistant... Migrates general configuration details that are McAfee epo Credentials and SVM Configuration to the McAfee MOVE AntiVirus General page under MOVE AntiVirus Deployment. Migrates IP Pool details to the McAfee MOVE AntiVirus IP Pool page under MOVE AntiVirus Deployment. Make sure that you do not use the same IP address range in McAfee MOVE AntiVirus NSX tagging vshield Manager NSX Manager Migrates NSX tagging values to the McAfee MOVE AntiVirus Server Settings page under MOVE AntiVirus Deployment. Migrates vshield Manager configuration details to the McAfee MOVE AntiVirus vshield Manager page under MOVE AntiVirus Deployment. Migrates: NSX Manager registration details to the McAfee MOVE AntiVirus NSX Manager page under MOVE AntiVirus Deployment NSX certificate data For McAfee MOVE AntiVirus 3.5.1, the NSX certificate data and the NSX Manager registration details such as NSX Manager name, user name, IP address, and password are migrated. But after completing the migration, make sure that you configure the SVM Configuration details under Menu Automation MOVE AntiVirus Deployment Configuration General. After completing data migration, the certificate details in McAfee MOVE AntiVirus are over-written with the certificate details from or McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 21

22 4 Data migration (Agentless only) Migrate McAfee MOVE AntiVirus (Agentless) deployment data The SVM OVF packages, which are checked-in to the legacy versions of the product are not migrated. After data migration completes, you can deploy McAfee MOVE AntiVirus to managed systems. See the McAfee MOVE AntiVirus Installation Guide for more information. Migrate McAfee MOVE AntiVirus (Agentless) deployment data Automatically migrate all your deployment data from and versions of McAfee MOVE AntiVirus. Before you begin Verify that the products to migrate are supported. Install the Migration Assistant extension on the McAfee epo server. Do not change the deployment configuration details in your legacy products after initiating the data migration. Task For details about product features, usage, and best practices, click? or Help. 1 Log on to McAfee epo as an administrator. 2 Select Menu Policy MOVE Migration Assistant. 3 Under Migrate Agentless Deployment Configuration Details (Agentless only), select Run, then click Next. 4 On the Confirmation dialog box, click OK to initiate the data migration process. The McAfee MOVE AntiVirus (Agentless) deployment data is migrated. Make sure that you run the data migration one time only. 22 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

23 5 Product 5 settings after migration Changes to McAfee MOVE AntiVirus policies include new policies, categories, options, and default settings that use the latest protection technologies and optimize product performance. During the migration process, migrated settings for policies, options, rules, and tasks might be renamed, removed, or reset to default values, depending on the target policies in McAfee MOVE AntiVirus Some settings are moved to new categories or policies, or merged with other settings. Contents McAfee default policy and product default settings Policy names and notes Policy merging and multiple-instance policies Migrating legacy policies to MOVE AntiVirus Common Migrating legacy policies to MOVE AntiVirus Changes to migrated settings Upgrade McAfee MOVE AntiVirus (Multi-Platform) to McAfee default policy and product default settings The McAfee Default policy does not migrate. If you currently use the McAfee Default policy for legacy products, the Migration Assistant assigns the My Default policy for the new version of McAfee MOVE AntiVirus. If a source policy with default settings (McAfee Default, an unedited version of My Default) is assigned to any group or managed system, the Migration Assistant assigns the new McAfee MOVE AntiVirus My Default policy during automatic migration. My Organization group under System Tree in McAfee epo can be assigned one policy at a time per category. So after migration, make sure that required policies from McAfee MOVE AntiVirus are reassigned, as appropriate. Policy names and notes The Migration Assistant uses these general conventions for naming migrated McAfee MOVE AntiVirus policies and creating policy notes. You can edit the policy names and notes before saving the new policies or after they are created. McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 23

24 5 Product settings after migration Policy names and notes Policy names Automatic migration One-to-one policy migration Same as the source name and appends (Upgraded). One-to-multiple or multiple-to-one policy migration Uses these conventions: Product name McAfee MOVE AntiVirus McAfee MOVE AntiVirus Common Target policy name Migrated [legacy product abbreviation] Policy(Upgraded)-[n] Where: Legacy products abbreviation is MOVE MultiPlatform, MOVE Agentless n is incremented each time a new policy is migrated for the same module Examples: Migrated MultiPlatform Policy(Upgraded) Migrated MultiPlatform Policy(Upgraded)-1 Migrated Agentlesss Policy(Upgraded) Migrated Multi-Platform Policy(Upgraded)-[n] Where n is incremented each time a new Common Options policy is created during a migration session. Examples: Migrated Multi-Platform Policy(Upgraded) Migrated Multi-Platform Policy(Upgraded)-1 Manual migration One-to-one policy migration Same as the source name and appends (Upgraded). If the target policy name already exists, the Migration Assistant appends a number that is incremented each time a new policy is created using that name. You can type a different policy name before saving the new policy. One-to-multiple or multiple-to-one policy migration Uses the convention as Migrated Agentless Policy(Upgraded) or Migrated MultiPlatform Policy(Upgraded). If the target policy name already exists, the Migration Assistant appends a number that is incremented each time a new policy is created using that name. You can type a name for each target policy as needed. Policy notes During migration, the Migration Assistant creates policy notes that include the name (and type, if applicable) of the source policy, the migration date and time, and the name of the user who migrated the policy. Example Source: MOVE AV [Multi-Platform] Client General > My Default; 9/10/ AM - Automatic Migration; User: admin 24 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

25 Product settings after migration Policy merging and multiple-instance policies 5 Policy merging and multiple-instance policies Sometimes, policies from multiple sources are merged into a single target policy. Table 5-1 How policies are merged during migration (policy level) Product module Source policy Target policy Agentless Scan On-Access Scan On-Demand Scan SVM Settings SVA On-Demand Scan Options (MOVE AntiVirus 4.5.0) SVM Settings Multi-Platform Client (General) Options (MOVE AntiVirus Common 4.5.0) On-Access Scan On-Demand Scan Options (MOVE AntiVirus) Client (Offload Scan Server Assignment) Options (MOVE AntiVirus) Offload Scan Server (General) Options (MOVE AntiVirus Common 4.5.0) On-Demand Scan Options (MOVE AntiVirus) SVM Settings SVA Manager (General) SVM Manager Settings Table 5-2 How policies are merged during migration (tab level) Product module Source policy category Source policy tab Target policy Agentless Scan General On-Access Scan On-Demand Scan Scan items Exclusions Actions Quarantine On-Access Scan SVM Settings On-Access Scan On-Demand Scan On-Access Scan On-Demand Scan On-Access Scan On-Demand Scan SVA General Settings SVM Settings McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 25

26 5 Product settings after migration Policy merging and multiple-instance policies Table 5-2 How policies are merged during migration (tab level) (continued) Product module Source policy category Source policy tab Scan Settings Target policy On-Demand Scan SVM Settings Quarantine Settings Options (MOVE AntiVirus 4.5.0) Multi-Platform Client (General) General Options (MOVE AntiVirus Common 4.5.0) On-Access Scan Scan items Alerts Actions Quarantine On-Access Scan On-Demand Scan On-Access Scan On-Access Scan On-Access Scan Options (MOVE AntiVirus 4.5.0) Client (Offload Scan Server Assignment) Offload Scan Server (General) Offload Scan Server Options (MOVE AntiVirus 4.5.0) General Options (MOVE AntiVirus Common 4.5.0) Options (MOVE AntiVirus 4.5.0) SVM Settings Scan Settings Events On-Demand scan SVM Settings Options (MOVE AntiVirus Common 4.5.0) SVM Settings On-Demand Scan SVM Settings SVA Manager (General) Tag assignment rule SVM Manager Settings IP assignment rule MOVE SVA Manager Settings SVM Manager Settings SVM Manager Settings 26 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

27 Product settings after migration Migrating legacy policies to MOVE AntiVirus Common 5 Migrating legacy policies to MOVE AntiVirus Common This overview shows where migrated policy settings for McAfee MOVE AntiVirus (Multi-Platform) appear in MOVE AntiVirus common policies. McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 27

28 5 Product settings after migration Migrating legacy policies to MOVE AntiVirus Migrating legacy policies to MOVE AntiVirus This overview shows where migrated policy settings for McAfee MOVE AntiVirus (Multi-Platform) appear in MOVE AntiVirus policies. 28 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

29 Product settings after migration Changes to migrated settings 5 This overview shows where migrated policy settings for McAfee MOVE AntiVirus (Agentless) appear in MOVE AntiVirus policies. Changes to migrated settings Use this information to locate legacy policy and task settings after migrating to McAfee MOVE AntiVirus Changes to McAfee MOVE AntiVirus (Multi-Platform) As part of the migration process from McAfee MOVE AntiVirus (Multi-Platform) to McAfee MOVE AntiVirus, some policies are removed, moved, renamed, added, or merged with other settings. Removed settings These McAfee MOVE AntiVirus (Multi-Platform) settings are not migrated. MOVE AV [Multi-Platform] Client (General) Cache Expiration Time Cache scan results expire after being cached for (hours) Offload Scan Server 1: IP address, host name or FQDN of OSS 1 Offload Scan Server 1 Port: Client sends requests to server 1 Port: 9053 Offload Scan Server 2: IP address, host name or FQDN of OSS 2 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 29

30 5 Product settings after migration Changes to migrated settings Offload Scan Server 2 Port: Client sends requests to server 1 Port: 9053 Optimization for Frequently Modified Files: Enabled MOVE AV [Multi-Platform] SVA Manager (General) (Advanced options) Short duration: 5 minutes epo Credentials (epo URL) Please ensure that McAfee SVA Manager is able to resolve this URL epo Username epo Password Confirm Password Log Settings Number of Log Files: 20 Log File Size: 10 MB Log level (Trace /Debug/Info/Warn/Error/Fatal/Off) MOVE AV [Multi-Platform] Offload Scan Server (General) MOVE SVA Manager Options Register this Offload Scan Server with SVA Manager MOVE SVA Manager IP address, hostname or FQDN MOVE SVA Manager Port Number of Log files Number of log files to maintain on the Server before removing the oldest log file: 20 Concurrent Scans Limit the number of available file scan request threads on the Server to: 300 RAM Disk Support Enabled Average Scan Time Event Sampling Interval: 5 (minutes) Moved, renamed, and added settings These McAfee MOVE AntiVirus (Multi-Platform) settings are moved, renamed, or added with other settings during migration. Table 5-3 Source policy: MOVE AV [Multi-Platform] Client (General) Option General Enable Protection: Enable malware protection Target policy/option Moved Renamed Added (MOVE AntiVirus 4.5.0) On-Access Scan On-access Scan: Enable On-Access Scan 30 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

31 Product settings after migration Changes to migrated settings 5 Table 5-3 Source policy: MOVE AV [Multi-Platform] Client (General) (continued) Option Scan Timeout: File scans time out after (Seconds): 45 Target policy/option Moved Renamed Added (MOVE AntiVirus 4.5.0) On-Access Scan On-access Scan: Specify maximum time for each file scan seconds Scan Result Cache: Cache scan results for files smaller than (MB): 40 (MOVE AntiVirus 4.5.0) On-Access Scan On-access Scan: Cache scan results for files smaller than MB During migration, if On-Demand Scan policy is created, then for this option, default value is used under On-Demand Scan policy. Local CLI Access Password: Password Confirm Password Reset password (MOVE AntiVirus Common 4.5.0) Options Self Protection Enable Self-Protection Enable Self-Protection for MOVE CLI Password Confirm Password Deferred scan settings: File size range Scan timeout (MOVE AntiVirus 4.5.0) On-Access Scan On-access Scan Scan Items Scan Files: When writing to disk When reading from disk (MOVE AntiVirus 4.5.0) On-Access Scan On-access Scan Opened for backup On network drives McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 31

32 5 Product settings after migration Changes to migrated settings Table 5-3 Source policy: MOVE AV [Multi-Platform] Client (General) (continued) Option File types to scan: All files Default + Additional files Following only Target policy/option Moved Renamed Added (MOVE AntiVirus 4.5.0) On-Access Scan File Types to Scan During migration, if On-Demand Scan policy is created, default value is selected to All files under On-Demand Scan policy. Path Exclusions: Item Exclude Subfolder (Table) (MOVE AntiVirus 4.5.0) On-Access Scan, On-Demand Scan Add/Edit/Remove/Import/ Clear During migration, **\Program Files\McAfee \Agent\ is added to the path exclusion's list. Process Exclusions: Add/Edit/Remove (MOVE AntiVirus 4.5.0) On-Access Scan Publisher Exclusions: Trust authenticated signed files (from Microsoft and McAfee) (Advanced Options) Cache validity for publisher based trust on signed files Maximum wait time for publisher trust verification Certificate revocation check Certificate validity period Alerts Threat Alerts: Malware detections are reported to the client event log. Malware detection events are sent to epo. (MOVE AntiVirus Common 4.5.0) Options Events: Log events to Windows Application log Send events to McAfee epo During migration, these values are not migrated and by default these options are enabled. 32 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

33 Product settings after migration Changes to migrated settings 5 Table 5-3 Source policy: MOVE AV [Multi-Platform] Client (General) (continued) Option Threat Alerts: Malware detections result in a pop-up on the client. Target policy/option Moved Renamed Added (MOVE AntiVirus 4.5.0) On-Access Scan Threat Detection Notify users when a threat is detected on a on-access scan Actions When a threat is found: Perform this action first: Delete files Automatically If the first action fails, then perform this action: Deny access to files (MOVE AntiVirus 4.5.0) On-Access Scan On-access Scan Delete files automatically and quarantine (primary action) Quarantine Quarantine Configuration: Enabled (MOVE AntiVirus 4.5.0) On-Access Scan Actions: Threat detection first response: Delete files automatically and quarantine Note that: In or 3.6.1, if the Enabled option is selected and Delete files automatically (primary action) is selected under Actions tab, then the setting migrates to: Threat detection first response: Delete files automatically and quarantine In or 3.6.1, if the Enabled option is deselected and Deny access to files (primary action) is selected under Actions tab, then the setting migrates to: Threat detection first response: Deny access to files Quarantine Directory: <SYSTEM_DRIVE> \Quarantine (MOVE AntiVirus 4.5.0) Options Quarantine Manager Quarantined data retention: Automatically delete quarantined data after the specified number of days Number of days to keep backed-up data in the quarantine directory: 28 days (MOVE AntiVirus 4.5.0) Options Quarantine Manager: Specify the maximum number of days to keep quarantine data days McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 33

34 5 Product settings after migration Changes to migrated settings Table 5-4 Source policy: MOVE AV [Multi-Platform] Client (Offload Scan Server Assignment) Option Offload Scan Server: Assign Offload Scan Server using MOVE SVA Manager MOVE SVA Manager IP Address, host name, or FQDN MOVE SVA Manager Port: 8080 Assign Offload Scan Server manually IP Address, host name, or FQDN of Offload Scan Server 1 Port of Offload Scan Server 1 IP Address, host name, or FQDN of Offload Scan Server 2 Port of Offload Scan Server 2 Target policy/option Moved (MOVE AntiVirus 4.5.0) Options SVM Assignment Renamed Table 5-5 Source policy: MOVE AV [Multi-Platform] SVA Manager (General) Option Tag Assignment Rules Offload Scan Server Rule Name Client Tags Offload Server Tags (table) Add/Edit/Remove/Move up/ Move down Assign OSS if no rule is defined above for client Note: *Tag rules will take precedence over IP based assignment rules. *Rules are listed in decreasing precedence order. *In case of overlapping rules, the first rule will be applied. Target policy/option Moved (MOVE AntiVirus 4.5.0) SVM Manager Settings Assignment Rules Renamed Assign SVM if no rule is defined for the above client During migration, this value is not migrated and by default this option is enabled. IP Assignment Rules 34 McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide

35 Product settings after migration Changes to migrated settings 5 Table 5-5 Source policy: MOVE AV [Multi-Platform] SVA Manager (General) (continued) Option IP Assignment Rules Rule Name Client IP Address Range Offload Server IP Address Range (table) Add/Edit/Remove/Move up/ Move down (buttons) Assign OSS if no rule is defined above for client Note: *Tag rules will take precedence over IP based assignment rules. *Rules are listed in decreasing precedence order. *In case of overlapping rules, the first rule will be applied. Target policy/option Moved (MOVE AntiVirus 4.5.0) SVM Manager Settings Assignment Rules Renamed Assign SVM if no rule is defined for the above client During migration, this value is not migrated and by default this option is enabled. MOVE SVA Manager Settings MOVE SVA Manager Settings Threshold for OSS Capacity Warning: 90% OSS assignment rules: Prefer OSS from same subnet OSS lease time: Default: 240 minutes Communication Ports: OSS Port: 8443 Client Port: 8080 (MOVE AntiVirus 4.5.0) SVM Manager Settings SVM Autoscale Settings: Threshold for SVM capacity warning (MOVE AntiVirus 4.5.0) SVM Manager Settings Assignment Rules Enable to get SVM preference from the same subnet Default lease time minutes (MOVE AntiVirus 4.5.0) SVM Manager Settings SVM Manager Configuration: SVM Port: 8443 Note: Used for SVM to communicate to SVM Manager Client Port: 8080 Note: Used for client to communicate to SVM Manager Table 5-6 Source policy: MOVE AV [Multi-Platform] Offload Scan Server (General) Option General Log file size: Rotate server log files when they reach(mb): 10 Target policy/option Moved Renamed (MOVE AntiVirus Common 4.5.0) Options Logging: Rotate log file content when the file size reaches McAfee Management for Optimized Virtual Environments AntiVirus Migration Guide 35